@cloudauth/providers 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CloudAuth
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/generic-oauth 2.js

@@ -0,0 +1,59 @@
+export function genericOAuth(config) {
+    const scopes = config.scopes ?? ['profile'];
+    return {
+        id: config.id,
+        type: 'oauth',
+        authorizationUrl(params) {
+            const url = new URL(config.authorizationEndpoint);
+            url.searchParams.set('client_id', config.clientId);
+            url.searchParams.set('redirect_uri', params.redirectUri);
+            url.searchParams.set('response_type', 'code');
+            url.searchParams.set('scope', scopes.join(' '));
+            url.searchParams.set('state', params.state);
+            return url;
+        },
+        async exchangeCode(params) {
+            const body = new URLSearchParams({
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code: params.code,
+                redirect_uri: params.redirectUri,
+                grant_type: 'authorization_code',
+            });
+            const response = await fetch(config.tokenEndpoint, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.text().catch(() => 'unknown error');
+                throw new Error(`${config.id} token exchange failed: ${String(response.status)} ${error}`);
+            }
+            const data = (await response.json());
+            return {
+                accessToken: data.access_token ?? '',
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                scope: data.scope,
+                tokenType: data.token_type,
+                expiresAt: data.expires_in,
+            };
+        },
+        async getProfile(tokens) {
+            const response = await fetch(config.userinfoEndpoint, {
+                headers: { Authorization: `Bearer ${tokens.accessToken}` },
+            });
+            if (!response.ok) {
+                throw new Error(`${config.id} userinfo failed: ${String(response.status)}`);
+            }
+            const data = (await response.json());
+            const profile = config.mapProfile(data);
+            return {
+                ...profile,
+                provider: config.id,
+                raw: data,
+            };
+        },
+    };
+}
+//# sourceMappingURL=generic-oauth.js.map

package/dist/generic-oauth.d 2.ts

@@ -0,0 +1,14 @@
+import type { AuthProvider, ProviderProfile } from '@cloudauth/core';
+export interface GenericOAuthConfig {
+    id: string;
+    clientId: string;
+    clientSecret: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    userinfoEndpoint: string;
+    redirectUri?: string;
+    scopes?: string[];
+    mapProfile: (profile: Record<string, unknown>) => ProviderProfile;
+}
+export declare function genericOAuth(config: GenericOAuthConfig): AuthProvider;
+//# sourceMappingURL=generic-oauth.d.ts.map

package/dist/generic-oauth.d.ts

@@ -0,0 +1,14 @@
+import type { AuthProvider, ProviderProfile } from '@cloudauth/core';
+export interface GenericOAuthConfig {
+    id: string;
+    clientId: string;
+    clientSecret: string;
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+    userinfoEndpoint: string;
+    redirectUri?: string;
+    scopes?: string[];
+    mapProfile: (profile: Record<string, unknown>) => ProviderProfile;
+}
+export declare function genericOAuth(config: GenericOAuthConfig): AuthProvider;
+//# sourceMappingURL=generic-oauth.d.ts.map

package/dist/generic-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oauth.d.ts","sourceRoot":"","sources":["../src/generic-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAIZ,eAAe,EAChB,MAAM,iBAAiB,CAAA;AAExB,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,eAAe,CAAA;CAClE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CA0ErE"}

package/dist/generic-oauth.js

@@ -0,0 +1,59 @@
+export function genericOAuth(config) {
+    const scopes = config.scopes ?? ['profile'];
+    return {
+        id: config.id,
+        type: 'oauth',
+        authorizationUrl(params) {
+            const url = new URL(config.authorizationEndpoint);
+            url.searchParams.set('client_id', config.clientId);
+            url.searchParams.set('redirect_uri', params.redirectUri);
+            url.searchParams.set('response_type', 'code');
+            url.searchParams.set('scope', scopes.join(' '));
+            url.searchParams.set('state', params.state);
+            return url;
+        },
+        async exchangeCode(params) {
+            const body = new URLSearchParams({
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code: params.code,
+                redirect_uri: params.redirectUri,
+                grant_type: 'authorization_code',
+            });
+            const response = await fetch(config.tokenEndpoint, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.text().catch(() => 'unknown error');
+                throw new Error(`${config.id} token exchange failed: ${String(response.status)} ${error}`);
+            }
+            const data = (await response.json());
+            return {
+                accessToken: data.access_token ?? '',
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                scope: data.scope,
+                tokenType: data.token_type,
+                expiresAt: data.expires_in,
+            };
+        },
+        async getProfile(tokens) {
+            const response = await fetch(config.userinfoEndpoint, {
+                headers: { Authorization: `Bearer ${tokens.accessToken}` },
+            });
+            if (!response.ok) {
+                throw new Error(`${config.id} userinfo failed: ${String(response.status)}`);
+            }
+            const data = (await response.json());
+            const profile = config.mapProfile(data);
+            return {
+                ...profile,
+                provider: config.id,
+                raw: data,
+            };
+        },
+    };
+}
+//# sourceMappingURL=generic-oauth.js.map

package/dist/generic-oauth.js 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oauth.js","sourceRoot":"","sources":["../src/generic-oauth.ts"],"names":[],"mappings":"AAoBA,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA;IAE3C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,OAAO;QAEb,gBAAgB,CAAC,MAA2B;YAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;YAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAA0B;YAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,oBAAoB;aACjC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;gBACjD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI;aACL,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAA;gBAChE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YAC5F,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAA;YAED,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;gBACpC,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAgB;YAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;gBACpD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;aAC3D,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;YAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YACvC,OAAO;gBACL,GAAG,OAAO;gBACV,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,GAAG,EAAE,IAAI;aACV,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/generic-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oauth.js","sourceRoot":"","sources":["../src/generic-oauth.ts"],"names":[],"mappings":"AAoBA,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA;IAE3C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,OAAO;QAEb,gBAAgB,CAAC,MAA2B;YAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;YAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAA0B;YAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,oBAAoB;aACjC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE;gBACjD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI;aACL,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAA;gBAChE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YAC5F,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAA;YAED,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;gBACpC,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAgB;YAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;gBACpD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;aAC3D,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;YAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YACvC,OAAO;gBACL,GAAG,OAAO;gBACV,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,GAAG,EAAE,IAAI;aACV,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/generic-oidc 2.js

@@ -0,0 +1,76 @@
+const DEFAULT_OIDC_SCOPES = ['openid', 'email', 'profile'];
+/**
+ * Create a generic OIDC provider.
+ * Uses the issuer URL to discover the authorization, token, and userinfo endpoints
+ * via the OIDC discovery document (/.well-known/openid-configuration).
+ */
+export async function createOIDCProvider(config) {
+    const scopes = config.scopes ?? DEFAULT_OIDC_SCOPES;
+    const discoveryUrl = `${config.issuer.replace(/\/+$/, '')}/.well-known/openid-configuration`;
+    const discoveryResponse = await fetch(discoveryUrl);
+    if (!discoveryResponse.ok) {
+        throw new Error(`OIDC discovery failed for ${config.id}: ${String(discoveryResponse.status)}`);
+    }
+    const discovery = (await discoveryResponse.json());
+    return {
+        id: config.id,
+        type: 'oidc',
+        authorizationUrl(params) {
+            const url = new URL(discovery.authorization_endpoint);
+            url.searchParams.set('client_id', config.clientId);
+            url.searchParams.set('redirect_uri', params.redirectUri);
+            url.searchParams.set('response_type', 'code');
+            url.searchParams.set('scope', scopes.join(' '));
+            url.searchParams.set('state', params.state);
+            return url;
+        },
+        async exchangeCode(params) {
+            const body = new URLSearchParams({
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code: params.code,
+                redirect_uri: params.redirectUri,
+                grant_type: 'authorization_code',
+            });
+            const response = await fetch(discovery.token_endpoint, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.text().catch(() => 'unknown error');
+                throw new Error(`${config.id} token exchange failed: ${String(response.status)} ${error}`);
+            }
+            const data = (await response.json());
+            return {
+                accessToken: data.access_token ?? '',
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                scope: data.scope,
+                tokenType: data.token_type,
+                expiresAt: data.expires_in,
+            };
+        },
+        async getProfile(tokens) {
+            const response = await fetch(discovery.userinfo_endpoint, {
+                headers: { Authorization: `Bearer ${tokens.accessToken}` },
+            });
+            if (!response.ok) {
+                throw new Error(`${config.id} userinfo failed: ${String(response.status)}`);
+            }
+            const data = (await response.json());
+            const mapped = config.mapProfile?.(data) ?? {};
+            return {
+                provider: config.id,
+                providerAccountId: data.sub ?? '',
+                email: data.email,
+                emailVerified: data.email_verified,
+                name: data.name,
+                image: data.picture,
+                ...mapped,
+                raw: data,
+            };
+        },
+    };
+}
+//# sourceMappingURL=generic-oidc.js.map

package/dist/generic-oidc.d 2.ts

@@ -0,0 +1,17 @@
+import type { AuthProvider, ProviderProfile } from '@cloudauth/core';
+export interface GenericOIDCConfig {
+    id: string;
+    clientId: string;
+    clientSecret: string;
+    issuer: string;
+    redirectUri?: string;
+    scopes?: string[];
+    mapProfile?: (profile: Record<string, unknown>) => Partial<ProviderProfile>;
+}
+/**
+ * Create a generic OIDC provider.
+ * Uses the issuer URL to discover the authorization, token, and userinfo endpoints
+ * via the OIDC discovery document (/.well-known/openid-configuration).
+ */
+export declare function createOIDCProvider(config: GenericOIDCConfig): Promise<AuthProvider>;
+//# sourceMappingURL=generic-oidc.d.ts.map

package/dist/generic-oidc.d.ts

@@ -0,0 +1,17 @@
+import type { AuthProvider, ProviderProfile } from '@cloudauth/core';
+export interface GenericOIDCConfig {
+    id: string;
+    clientId: string;
+    clientSecret: string;
+    issuer: string;
+    redirectUri?: string;
+    scopes?: string[];
+    mapProfile?: (profile: Record<string, unknown>) => Partial<ProviderProfile>;
+}
+/**
+ * Create a generic OIDC provider.
+ * Uses the issuer URL to discover the authorization, token, and userinfo endpoints
+ * via the OIDC discovery document (/.well-known/openid-configuration).
+ */
+export declare function createOIDCProvider(config: GenericOIDCConfig): Promise<AuthProvider>;
+//# sourceMappingURL=generic-oidc.d.ts.map

package/dist/generic-oidc.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oidc.d.ts","sourceRoot":"","sources":["../src/generic-oidc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAIZ,eAAe,EAChB,MAAM,iBAAiB,CAAA;AAExB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;CAC5E;AAaD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA6FzF"}

package/dist/generic-oidc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oidc.d.ts","sourceRoot":"","sources":["../src/generic-oidc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAIZ,eAAe,EAChB,MAAM,iBAAiB,CAAA;AAExB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;CAC5E;AAaD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA6FzF"}

package/dist/generic-oidc.js

@@ -0,0 +1,76 @@
+const DEFAULT_OIDC_SCOPES = ['openid', 'email', 'profile'];
+/**
+ * Create a generic OIDC provider.
+ * Uses the issuer URL to discover the authorization, token, and userinfo endpoints
+ * via the OIDC discovery document (/.well-known/openid-configuration).
+ */
+export async function createOIDCProvider(config) {
+    const scopes = config.scopes ?? DEFAULT_OIDC_SCOPES;
+    const discoveryUrl = `${config.issuer.replace(/\/+$/, '')}/.well-known/openid-configuration`;
+    const discoveryResponse = await fetch(discoveryUrl);
+    if (!discoveryResponse.ok) {
+        throw new Error(`OIDC discovery failed for ${config.id}: ${String(discoveryResponse.status)}`);
+    }
+    const discovery = (await discoveryResponse.json());
+    return {
+        id: config.id,
+        type: 'oidc',
+        authorizationUrl(params) {
+            const url = new URL(discovery.authorization_endpoint);
+            url.searchParams.set('client_id', config.clientId);
+            url.searchParams.set('redirect_uri', params.redirectUri);
+            url.searchParams.set('response_type', 'code');
+            url.searchParams.set('scope', scopes.join(' '));
+            url.searchParams.set('state', params.state);
+            return url;
+        },
+        async exchangeCode(params) {
+            const body = new URLSearchParams({
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code: params.code,
+                redirect_uri: params.redirectUri,
+                grant_type: 'authorization_code',
+            });
+            const response = await fetch(discovery.token_endpoint, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.text().catch(() => 'unknown error');
+                throw new Error(`${config.id} token exchange failed: ${String(response.status)} ${error}`);
+            }
+            const data = (await response.json());
+            return {
+                accessToken: data.access_token ?? '',
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                scope: data.scope,
+                tokenType: data.token_type,
+                expiresAt: data.expires_in,
+            };
+        },
+        async getProfile(tokens) {
+            const response = await fetch(discovery.userinfo_endpoint, {
+                headers: { Authorization: `Bearer ${tokens.accessToken}` },
+            });
+            if (!response.ok) {
+                throw new Error(`${config.id} userinfo failed: ${String(response.status)}`);
+            }
+            const data = (await response.json());
+            const mapped = config.mapProfile?.(data) ?? {};
+            return {
+                provider: config.id,
+                providerAccountId: data.sub ?? '',
+                email: data.email,
+                emailVerified: data.email_verified,
+                name: data.name,
+                image: data.picture,
+                ...mapped,
+                raw: data,
+            };
+        },
+    };
+}
+//# sourceMappingURL=generic-oidc.js.map

package/dist/generic-oidc.js 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oidc.js","sourceRoot":"","sources":["../src/generic-oidc.ts"],"names":[],"mappings":"AA2BA,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAE1D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAyB;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAA;IAEnD,MAAM,YAAY,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mCAAmC,CAAA;IAC5F,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;IAEnD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAIhD,CAAA;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM;QAEZ,gBAAgB,CAAC,MAA2B;YAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;YACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;YAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAA0B;YAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,oBAAoB;aACjC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI;aACL,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAA;gBAChE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YAC5F,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAA;YAED,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;gBACpC,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAgB;YAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,iBAAiB,EAAE;gBACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;aAC3D,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAA;YACxD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,iBAAiB,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;gBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,GAAG,MAAM;gBACT,GAAG,EAAE,IAAI;aACV,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/generic-oidc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-oidc.js","sourceRoot":"","sources":["../src/generic-oidc.ts"],"names":[],"mappings":"AA2BA,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAE1D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAyB;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAA;IAEnD,MAAM,YAAY,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mCAAmC,CAAA;IAC5F,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;IAEnD,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAIhD,CAAA;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM;QAEZ,gBAAgB,CAAC,MAA2B;YAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;YACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;YAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAA0B;YAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,oBAAoB;aACjC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI;aACL,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAA;gBAChE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YAC5F,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAA;YAED,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;gBACpC,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAgB;YAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,iBAAiB,EAAE;gBACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;aAC3D,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,qBAAqB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC7E,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAA;YACxD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAE9C,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,iBAAiB,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;gBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,GAAG,MAAM;gBACT,GAAG,EAAE,IAAI;aACV,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/github.d 2.ts

@@ -0,0 +1,9 @@
+import type { AuthProvider } from '@cloudauth/core';
+export interface GitHubConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri?: string;
+    scope?: string[];
+}
+export declare function github(config: GitHubConfig): AuthProvider;
+//# sourceMappingURL=github.d.ts.map

package/dist/github.d.ts

@@ -0,0 +1,9 @@
+import type { AuthProvider } from '@cloudauth/core';
+export interface GitHubConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri?: string;
+    scope?: string[];
+}
+export declare function github(config: GitHubConfig): AuthProvider;
+//# sourceMappingURL=github.d.ts.map

package/dist/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAKb,MAAM,iBAAiB,CAAA;AAExB,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AA+BD,wBAAgB,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAyFzD"}

package/dist/github.js

@@ -0,0 +1,83 @@
+const GITHUB_AUTH_URL = 'https://github.com/login/oauth/authorize';
+const GITHUB_TOKEN_URL = 'https://github.com/login/oauth/access_token';
+const GITHUB_USER_API = 'https://api.github.com/user';
+const GITHUB_USER_EMAILS_API = 'https://api.github.com/user/emails';
+const DEFAULT_SCOPES = ['read:user', 'user:email'];
+export function github(config) {
+    const scopes = config.scope ?? DEFAULT_SCOPES;
+    return {
+        id: 'github',
+        type: 'oauth',
+        authorizationUrl(params) {
+            const url = new URL(GITHUB_AUTH_URL);
+            url.searchParams.set('client_id', config.clientId);
+            url.searchParams.set('redirect_uri', params.redirectUri);
+            url.searchParams.set('scope', scopes.join(' '));
+            url.searchParams.set('state', params.state);
+            return url;
+        },
+        async exchangeCode(params) {
+            const body = new URLSearchParams({
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code: params.code,
+                redirect_uri: params.redirectUri,
+            });
+            const response = await fetch(GITHUB_TOKEN_URL, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                    Accept: 'application/json',
+                },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.text().catch(() => 'unknown error');
+                throw new Error(`GitHub token exchange failed: ${String(response.status)} ${error}`);
+            }
+            const data = (await response.json());
+            return {
+                accessToken: data.access_token ?? '',
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                scope: data.scope,
+                tokenType: data.token_type,
+                expiresAt: data.expires_in,
+            };
+        },
+        async getProfile(tokens) {
+            const userResponse = await fetch(GITHUB_USER_API, {
+                headers: { Authorization: `Bearer ${tokens.accessToken}` },
+            });
+            if (!userResponse.ok) {
+                throw new Error(`GitHub user API failed: ${String(userResponse.status)}`);
+            }
+            const userData = (await userResponse.json());
+            let email = userData.email;
+            let emailVerified = Boolean(userData.email);
+            if (!email) {
+                const emailsResponse = await fetch(GITHUB_USER_EMAILS_API, {
+                    headers: { Authorization: `Bearer ${tokens.accessToken}` },
+                });
+                if (emailsResponse.ok) {
+                    const emails = (await emailsResponse.json());
+                    const primaryEmail = emails.find((e) => e.primary);
+                    if (primaryEmail) {
+                        email = primaryEmail.email;
+                        emailVerified = primaryEmail.verified;
+                    }
+                }
+            }
+            return {
+                provider: 'github',
+                providerAccountId: userData.id != null ? String(userData.id) : '',
+                email,
+                emailVerified,
+                name: userData.name ?? userData.login,
+                image: userData.avatar_url,
+                raw: { ...userData, emails: undefined },
+            };
+        },
+    };
+}
+//# sourceMappingURL=github.js.map

package/dist/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAeA,MAAM,eAAe,GAAG,0CAA0C,CAAA;AAClE,MAAM,gBAAgB,GAAG,6CAA6C,CAAA;AACtE,MAAM,eAAe,GAAG,6BAA6B,CAAA;AACrD,MAAM,sBAAsB,GAAG,oCAAoC,CAAA;AACnE,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;AAyBlD,MAAM,UAAU,MAAM,CAAC,MAAoB;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,cAAc,CAAA;IAE7C,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,OAAO;QAEb,gBAAgB,CAAC,MAA2B;YAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAA;YACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;YAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3C,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAA0B;YAC3C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;gBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;aACjC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;gBAC7C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI;aACL,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,CAAA;gBAChE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;YACtF,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAA;YAC3D,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;gBACpC,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,IAAI,CAAC,UAAU;gBAC1B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAgB;YAC/B,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBAChD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;aAC3D,CAAC,CAAA;YAEF,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC3E,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAe,CAAA;YAE1D,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;YAC1B,IAAI,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;YAE3C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,sBAAsB,EAAE;oBACzD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE;iBAC3D,CAAC,CAAA;gBAEF,IAAI,cAAc,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAAkB,CAAA;oBAC7D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;oBAClD,IAAI,YAAY,EAAE,CAAC;wBACjB,KAAK,GAAG,YAAY,CAAC,KAAK,CAAA;wBAC1B,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAA;oBACvC,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,iBAAiB,EAAE,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,KAAK;gBACL,aAAa;gBACb,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK;gBACrC,KAAK,EAAE,QAAQ,CAAC,UAAU;gBAC1B,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE;aACxC,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/google 2.js

@@ -0,0 +1,71 @@
+const GOOGLE_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';
+const GOOGLE_TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const GOOGLE_USERINFO_URL = 'https://openidconnect.googleapis.com/v1/userinfo';
+const DEFAULT_SCOPES = ['openid', 'email', 'profile'];
+export function google(config) {
+    const scopes = config.scope ?? DEFAULT_SCOPES;
+    return {
+        id: 'google',
+        type: 'oidc',
+        authorizationUrl(params) {
+            const url = new URL(GOOGLE_AUTH_URL);
+            url.searchParams.set('client_id', config.clientId);
+            url.searchParams.set('redirect_uri', params.redirectUri);
+            url.searchParams.set('response_type', 'code');
+            url.searchParams.set('scope', scopes.join(' '));
+            url.searchParams.set('state', params.state);
+            url.searchParams.set('code_challenge', params.codeVerifier);
+            url.searchParams.set('code_challenge_method', 'S256');
+            url.searchParams.set('access_type', 'offline');
+            url.searchParams.set('prompt', 'consent');
+            return url;
+        },
+        async exchangeCode(params) {
+            const body = new URLSearchParams({
+                client_id: config.clientId,
+                client_secret: config.clientSecret,
+                code: params.code,
+                code_verifier: params.codeVerifier,
+                redirect_uri: params.redirectUri,
+                grant_type: 'authorization_code',
+            });
+            const response = await fetch(GOOGLE_TOKEN_URL, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body,
+            });
+            if (!response.ok) {
+                const error = await response.text().catch(() => 'unknown error');
+                throw new Error(`Google token exchange failed: ${String(response.status)} ${error}`);
+            }
+            const data = (await response.json());
+            return {
+                accessToken: data.access_token ?? '',
+                refreshToken: data.refresh_token,
+                idToken: data.id_token,
+                scope: data.scope,
+                tokenType: data.token_type,
+                expiresAt: data.expires_in,
+            };
+        },
+        async getProfile(tokens) {
+            const response = await fetch(GOOGLE_USERINFO_URL, {
+                headers: { Authorization: `Bearer ${tokens.accessToken}` },
+            });
+            if (!response.ok) {
+                throw new Error(`Google userinfo failed: ${String(response.status)}`);
+            }
+            const data = (await response.json());
+            return {
+                provider: 'google',
+                providerAccountId: data.sub ?? '',
+                email: data.email,
+                emailVerified: data.email_verified,
+                name: data.name,
+                image: data.picture,
+                raw: data,
+            };
+        },
+    };
+}
+//# sourceMappingURL=google.js.map

package/dist/google.d 2.ts

@@ -0,0 +1,9 @@
+import type { AuthProvider } from '@cloudauth/core';
+export interface GoogleConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri?: string;
+    scope?: string[];
+}
+export declare function google(config: GoogleConfig): AuthProvider;
+//# sourceMappingURL=google.d.ts.map

package/dist/google.d.ts

@@ -0,0 +1,9 @@
+import type { AuthProvider } from '@cloudauth/core';
+export interface GoogleConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri?: string;
+    scope?: string[];
+}
+export declare function google(config: GoogleConfig): AuthProvider;
+//# sourceMappingURL=google.d.ts.map

package/dist/google.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../src/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAKb,MAAM,iBAAiB,CAAA;AAExB,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAwBD,wBAAgB,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CA2EzD"}

package/dist/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../src/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EAKb,MAAM,iBAAiB,CAAA;AAExB,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAwBD,wBAAgB,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CA2EzD"}